popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46231 2020-10-09 10:02 http://popcash.net/world/go/18...  

69f7b51e3f887ef9139b43b846a49cfd


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		7 5 3 4.6 M guest

46232 2020-10-09 09:44 osi.exe  

918b4df1f8d7b1e18e3e8fccdef3f5de


VirusTotal Malware unpack itself Tofsee DNS crashed 		2 1 1 3.0 37 guest

46233 2020-10-09 09:40 mo.exe  

28ed1a03d61d424938945d0b139d0f84


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs Ransomware Windows Browser Tor Email ComputerName Cryptographic key Software crashed 		9.2 M 25 guest

46234 2020-10-09 09:22 530340.png2.exe  

5561dda0904f3db7ac870875f26ff117


unpack itself Remote Code Execution 		0.6 guest

46235 2020-10-09 09:21 530340.png.exe  

06e611b7fc19fa80040b2e797b9991d8


unpack itself malicious URLs WriteConsoleW ComputerName Remote Code Execution 		1.8 guest

46236 2020-10-08 17:50 regasm.exe  

be561ab612f3a4fd45d061ce27ed5f6d


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Trojan DNS Software crashed 		1 1 8 13.6 31 guest

46237 2020-10-08 11:03 http://50.121.226.158/changepw...  

22d27255d945c05b79bfc74eb69a77a0


Dridex VirusTotal Malware Code Injection Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		4 2 3 6.0 M 50 admin

46238 2020-10-08 10:09 http://e-money.kr/  

7d4638c3d5662dd60fcee9df0d9b75e5


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		31 11 4 4.6 guest

46239 2020-10-08 09:59 msbplay.exe  

db897c498d11b86bb0c7a486df033e60


VirusTotal Malware PDB MachineGuid Check memory Checks debugger unpack itself malicious URLs 		3.0 M 32 guest

46240 2020-10-08 09:40 svchost.exe  

ce400cfe49777d6039d4b5d7317f44cc


VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows DNS 		4 4 8.6 22 guest

46241 2020-10-08 09:38 c.exe  

c71eacf3ffaf82787a533eb452bcf3e7


VirusTotal Malware AutoRuns Code Injection Windows utilities suspicious process AppData folder Windows DNS 		1 6.0 64 guest

46242 2020-10-08 09:29 WiPvqc8PxnUiCGh.exe  

854bd172baa97e9ceccd5984e39f6623


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Ransomware Windows Tor ComputerName crashed keylogger 		14.8 21 guest

46243 2020-10-08 09:29 don.exe  

1941b425080aeb2d67a5f87c416c78dc


Browser Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs WriteConsoleW Tofsee Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key crashed keylogger 		4 3 1 15.8 18 guest

46244 2020-10-07 16:04 18053.xlsb  

46d5ee8e706c0c137394f519603fbfc2


VirusTotal Malware Creates executable files unpack itself malicious URLs DNS 		1 5.0 3 guest

46245 2020-10-07 11:33 PTDRZYuerB14PU6.exe  

0bb37df01d67551ee30e6301cb5d59d9


Emotet Malware download VirusTotal Malware Report PDB RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 3 4 7.0 47 guest

keyword